CVE-2020-16154

CVE-2020-16154 affects the Perl module perl-App-cpanminus, reported as version 1.7044. The issue is a bypass of signature verification for CHECKSUMS files, enabling potential integrity concerns. Public advisories (e.g., ALAS-2025-2802) instruct updating perl-App-cpanminus (e.g., via yum update) t...

CVE-2024-45321

The App::cpanminus package for Perl (versions through 1.7047 ) is vulnerable to remote code execution because it downloads code via insecure HTTP . This vulnerability affects multiple distributions, including MiracleLinux 8 , MiracleLinux 9 , TencentOS Server 3 , TencentOS Server 4 , and Alibaba ...